1995 Jeep Grand Cherokee Laredo Awd on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

Jeep and Ram diesel owners get $3,075 in lawsuit settlement

Owners of certain Ram 1500 and Jeep Grand Cherokees equipped with diesel engines will get up to $3,075 in compensation for repairs under a settlement of a class-action lawsuit against Fiat Chrysler over illegal emissions-cheating software. The roughly $800 million settlement was first announced in January and approved by a federal judge in California last week, according to Consumer Reports. The affected vehicles are 2014 to 2016 Ram 1500 pickup trucks and Jeep Grand Cherokee SUVs equipped with 3.0-liter EcoDiesel V6 engines. FCA will update the emissions control software, provide an extended warranty covering up to 10 years or 120,000 miles, and provide cash compensation. Eligible owners will get as much as $3,075, while eligible lessees, former lease holders and former owners will get up to $990, and partial owners will get up to $2,460. FCA has established an EcoDiesel Settlement website where affected owners can find more information on how to submit and track a claim and sign up for updates. Customers with questions can also call 833-280-4748. Vehicle owners will have 21 months to submit a claim, with a deadline of Feb. 3, 2021, and two years to complete the repair and receive compensation for it. Former owners and lease holders must submit claims by Aug. 1, 2019. The EPA in early 2017 issued a notice of violation to FCA after Jeep and Ram installed eight emissions control devices on diesel vehicles. FCA's settlement includes $311 million in total civil penalties to U.S. and California regulators, up to $280 million to resolve claims from diesel owners, $105 million in extended warranties, $72.5 million in state civil penalties and $33.5 million in payments to California for excess emissions and to resolve consumer claims. Auto supplier Robert Bosch GmbH, which provided emissions control software, is paying $27.5 million to resolve claims, plus $103.5 million to settle claims with 47 states. The federal court also approved consent decrees between FCA, the EPA and the California Air Resources Board, plus agreements with all 50 stats and the U.S. Customs and Border Protection. In a statement, FCA said, "The settlements contain no findings of wrongdoing, nor admission of any wrongdoing, by FCA US" and added that the software fixes will have no affect on average fuel economy, performance or other characteristics of the vehicles.

FCA to appeal reduced judgment in Georgia Jeep case

FCA is appealing the $40 million verdict against it in a case in Georgia where a four-year-old boy died in a fire in a Jeep Grand Cherokee, according to The Detroit News. The jury originally awarded the child's family $150 million, but the judge decided to significantly to reduce the amount based on other precedents. The automaker has been considering further legal options since the decision was announced in July. The boy's death happened in 2012 when he was riding in a Grand Cherokee. The vehicle was rear-ended, and the fuel tank burst, causing a fire. This is the same issue that led to a recall of millions of the SUVs and a recent agreement with the US government from FCA to pay to get them fixed. In the original ruling, the jury said that the automaker was 99 percent responsible for the fatality and didn't adequately warn owners. It asked the company to pay $120 million for wrongful death and $30 million for his pain and suffering. FCA countered that the Jeeps met the safety standards of the time they were made. FCA requested that the jury's award be reduced in May calling the amount "grossly excessive." If the family didn't agree to a lower amount, the company also threatened to seek a new trial. Among the arguments was that $30 million was too much for the child's one minute of suffering. The parents did accept the judge's adjusted figure, though.